# Logstash not producing output although pipeline main starts **URL:** \ **Category:** Logstash\ **Created:** [December 14, 2017, 6:44am UTC](https://discuss.elastic.co/t/logstash-not-producing-output-although-pipeline-main-starts/111689 "2017-12-14T06:44:23Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![khare.garima](https://avatars.discourse-cdn.com/v4/letter/k/a6a055/32.png) [@khare.garima](https://discuss.elastic.co/u/khare.garima)\ **Post date:** [December 14, 2017, 6:44am UTC](https://discuss.elastic.co/t/logstash-not-producing-output-although-pipeline-main-starts/111689/1 "2017-12-14T06:44:23Z")
I am trying to execute logstash.bat with version 5.6 and 6.0 on a windows 10 machine. Following is the conf file: input { file { path =\> "D:/access\_log113.log" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } filter { grok{ match=\>{ "message"=\>"%{IP:clientip} - - [%{NOTSPACE:date} -%{INT}] "%{WORD:action} /%{WORD}/%{WORD}/%{NOTSPACE:login} %{WORD:protocol}/%{NUMBER:protocolNum}" %{NUMBER:status} %{NUMBER} "%{NOTSPACE}" "%{NOTSPACE:client} (%{WORD}; %{WORD:clientOs}%{GREEDYDATA}" } add\_field=\>{ "eventName"=\>"grok" } } geoip { source =\> "clientip" } } output { stdout { codec =\> json } } Following is the log file I am trying to parse 172.26.214.3 - - [14/Feb/2017:11:35:56 +0530] "POST /perfservice/j\_spring\_cas\_security\_check HTTP/1.1" 200 - 172.26.214.3 - - [14/Feb/2017:11:48:38 +0530] "GET /perfservice/ HTTP/1.1" 200 4050 172.26.214.3 - - [14/Feb/2017:11:48:38 +0530] "GET /perfservice/images/TaaS 2.jpg HTTP/1.1" 200 30037 172.26.214.3 - - [14/Feb/2017:11:48:38 +0530] "GET /perfservice/images/background-homenew.png HTTP/1.1" 200 8631 172.26.214.3 - - [14/Feb/2017:11:48:38 +0530] "GET /perfservice/images/PerformanceBanner.jpg HTTP/1.1" 200 100516 172.26.214.3 - - [14/Feb/2017:11:48:44 +0530] "GET /perfservice/newlauncherExecution HTTP/1.1" 302 - 172.36.214.4 - - [14/Feb/2017:11:35:56 +0530] "POST /perfservice/j\_spring\_cas\_security\_check HTTP/1.1" 200 - 172.36.214.5 - - [14/Feb/2017:11:48:38 +0530] "GET /perfservice/ HTTP/1.1" 200 4050 172.36.214.3 - - [14/Feb/2017:11:48:38 +0530] "GET /perfservice/images/TaaS 2.jpg HTTP/1.1" 200 30037 172.36.217.3 - - [14/Feb/2017:11:48:38 +0530] "GET /perfservice/images/background-homenew.png HTTP/1.1" 200 8631 172.36.214.3 - - [14/Feb/2017:11:48:38 +0530] "GET /perfservice/images/PerformanceBanner.jpg HTTP/1.1" 200 100516 173.36.215.3 - - [14/Feb/2017:11:48:44 +0530] "GET /perfservice/newlauncherExecution HTTP/1.1" 302 - The pipeline main starts but there is no output. Neither does it print to stdout, nor it creates an output file when i mention file path in conf file output field. Following is the debug command line info I am receiving: D:\ELKStack\logstash-6.0.1\logstash-6.0.1\bin\>logstash.bat -f logstash1.conf --debug Sending Logstash's logs to D:/ELKStack/logstash-6.0.1/logstash-6.0.1/logs which is now configured via log4j2.properties [2017-12-14T11:45:09,207][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"fb\_apache", :directory=\>"D:/ELKStack/logstash-6.0.1/logstash-6.0.1/modules/fb\_apache/configuration"} [2017-12-14T11:45:09,210][DEBUG][logstash.plugins.registry] Adding plugin to the registry {:name=\>"fb\_apache", :type=\>:modules, :class=\>#\} [2017-12-14T11:45:09,212][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"netflow", :directory=\>"D:/ELKStack/logstash-6.0.1/logstash-6.0.1/modules/netflow/configuration"} [2017-12-14T11:45:09,212][DEBUG][logstash.plugins.registry] Adding plugin to the registry {:name=\>"netflow", :type=\>:modules, :class=\>#\} [2017-12-14T11:45:09,270][DEBUG][logstash.config.source.multilocal] Reading pipeline configurations from YAML {:location=\>"D:/ELKStack/logstash-6.0.1/logstash-6.0.1/config/pipelines.yml"} [2017-12-14T11:45:09,278][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified [2017-12-14T11:45:09,380][DEBUG][logstash.agent] Agent: Configuring metric collection [2017-12-14T11:45:09,389][DEBUG][logstash.instrument.periodicpoller.os] PeriodicPoller: Starting {:polling\_interval=\>5, :polling\_timeout=\>120} [2017-12-14T11:45:09,419][DEBUG][logstash.instrument.periodicpoller.jvm] PeriodicPoller: Starting {:polling\_interval=\>5, :polling\_timeout=\>120} [2017-12-14T11:45:09,485][DEBUG][logstash.instrument.periodicpoller.persistentqueue] PeriodicPoller: Starting {:polling\_interval=\>5, :polling\_timeout=\>120} [2017-12-14T11:45:09,492][DEBUG][logstash.instrument.periodicpoller.deadletterqueue] PeriodicPoller: Starting {:polling\_interval=\>5, :polling\_timeout=\>120} [2017-12-14T11:45:09,507][DEBUG][logstash.agent] starting agent [2017-12-14T11:45:09,520][DEBUG][logstash.agent] Starting puma [2017-12-14T11:45:09,523][DEBUG][logstash.agent] Trying to start WebServer {:port=\>9600} [2017-12-14T11:45:09,546][DEBUG][logstash.config.source.local.configpathloader] Skipping the following files while reading config since they don't match the specified glob pattern {:files=\>["D:/ELKStack/logstash-6.0.1/logstash-6.0.1/bin/cpdump", "D:/ELKStack/logstash-6.0.1/logstash-6.0.1/bin/ingest-convert.sh", "D:/ELKStack/logstash-6.0.1/logstash-6.0.1/bin/logstash", "D:/ELKStack/logstash-6.0.1/logstash-6.0.1/bin/logstash-plugin", "D:/ELKStack/logstash-6.0.1/logstash-6.0.1/bin/logstash-plugin.bat", "D:/ELKStack/logstash-6.0.1/logstash-6.0.1/bin/logstash.bat", "D:/ELKStack/logstash-6.0.1/logstash-6.0.1/bin/logstash.lib.sh", "D:/ELKStack/logstash-6.0.1/logstash-6.0.1/bin/ruby", "D:/ELKStack/logstash-6.0.1/logstash-6.0.1/bin/setup.bat", "D:/ELKStack/logstash-6.0.1/logstash-6.0.1/bin/system-install"]} [2017-12-14T11:45:09,551][DEBUG][logstash.api.service] [api-service] start [2017-12-14T11:45:09,554][DEBUG][logstash.config.source.local.configpathloader] Reading config file {:config\_file=\>"D:/ELKStack/logstash-6.0.1/logstash-6.0.1/bin/logstash1.conf"} [2017-12-14T11:45:09,585][DEBUG][logstash.agent] Converging pipelines [2017-12-14T11:45:09,587][DEBUG][logstash.agent] Needed actions to converge {:actions\_count=\>1} [2017-12-14T11:45:09,592][DEBUG][logstash.agent] Executing action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main} [2017-12-14T11:45:09,665][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600} Need help on what the possible issue could be. Pipeline main starts but I receive no output. ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [December 14, 2017, 6:49am UTC](https://discuss.elastic.co/t/logstash-not-producing-output-although-pipeline-main-starts/111689/2 "2017-12-14T06:49:28Z")
> sincedb\_path =\> "/dev/null" On Windows use "nul" instead of "/dev/null". ---
**Author:** ![khare.garima](https://avatars.discourse-cdn.com/v4/letter/k/a6a055/32.png) [@khare.garima](https://discuss.elastic.co/u/khare.garima)\ **Post date:** [December 14, 2017, 6:59am UTC](https://discuss.elastic.co/t/logstash-not-producing-output-although-pipeline-main-starts/111689/3 "2017-12-14T06:59:47Z")
Still no output: D:\ELKStack\logstash-6.0.1\logstash-6.0.1\bin\>logstash.bat -f logstash1.conf Sending Logstash's logs to D:/ELKStack/logstash-6.0.1/logstash-6.0.1/logs which is now configured via log4j2.properties [2017-12-14T12:28:48,151][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"fb\_apache", :directory=\>"D:/ELKStack/logstash-6.0.1/logstash-6.0.1/modules/fb\_apache/configuration"} [2017-12-14T12:28:48,151][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"netflow", :directory=\>"D:/ELKStack/logstash-6.0.1/logstash-6.0.1/modules/netflow/configuration"} [2017-12-14T12:28:48,260][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified [2017-12-14T12:28:48,479][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600} [2017-12-14T12:28:49,323][INFO][logstash.filters.geoip] Using geoip database {:path=\>"D:/ELKStack/logstash-6.0.1/logstash-6.0.1/vendor/bundle/jruby/2.3.0/gems/logstash-filter-geoip-5.0.2-java/vendor/GeoLite2-City.mmdb"} [2017-12-14T12:28:49,355][INFO][logstash.pipeline] Starting pipeline {:pipeline\_id=\>"main", "pipeline.workers"=\>4, "pipeline.batch.size"=\>125, "pipeline.batch.delay"=\>5, "pipeline.max\_inflight"=\>500, :thread=\>"#\"} [2017-12-14T12:28:49,605][INFO][logstash.pipeline] Pipeline started {"[pipeline.id](http://pipeline.id)"=\>"main"} [2017-12-14T12:28:49,652][INFO][logstash.agent] Pipelines running {:count=\>1, :pipelines=\>["main"]} ---
**Author:** ![khare.garima](https://avatars.discourse-cdn.com/v4/letter/k/a6a055/32.png) [@khare.garima](https://discuss.elastic.co/u/khare.garima)\ **Post date:** [December 14, 2017, 7:48am UTC](https://discuss.elastic.co/t/logstash-not-producing-output-although-pipeline-main-starts/111689/4 "2017-12-14T07:48:26Z")
I tried executing same configuration file on other system and it is giving output on that system. Is there any system related configuration needs to be done. ---
**Author:** ![khare.garima](https://avatars.discourse-cdn.com/v4/letter/k/a6a055/32.png) [@khare.garima](https://discuss.elastic.co/u/khare.garima)\ **Post date:** [December 14, 2017, 8:57am UTC](https://discuss.elastic.co/t/logstash-not-producing-output-although-pipeline-main-starts/111689/5 "2017-12-14T08:57:26Z")
It's working now! Issue was in conf file-some space. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 11, 2018, 8:57am UTC](https://discuss.elastic.co/t/logstash-not-producing-output-although-pipeline-main-starts/111689/6 "2018-01-11T08:57:26Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.